Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

38 records

Release: Apple macOS 14.8.2, 15.7.2, 26.1 Clear all filters
TI-2025-28078 CVE-2025-43373 · GHSA-rjqj-9gr4-2cgw

Memory corruption in Apple macOS

Priority LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-119
TI-2025-28116 CVE-2025-43411 · GHSA-f355-f4c3-6hgx

Information disclosure in Apple macOS

Priority LOW 24

This issue was addressed with additional entitlement checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0021 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-200
TI-2025-28150 CVE-2025-43446 · GHSA-rfwj-hvcp-2885

Link following in Apple macOS

Priority LOW 24

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00231 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-59
TI-2025-28096 CVE-2025-43391 · GHSA-g279-fcr7-4vrp

Information disclosure in Apple iOS and iPadOS

Priority LOW 24

A privacy issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00207 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-200
TI-2025-28055 CVE-2025-43348 · GHSA-4973-frxh-rf9v

Improper input validation in Apple macOS

Priority LOW 30

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00241 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-20
TI-2025-28101 CVE-2025-43396 · GHSA-9jvg-8527-r4jp

Improper access control in Apple macOS

Priority LOW 24

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00198 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-284
TI-2025-28084 CVE-2025-43379 · GHSA-8xgx-m7f9-xj3q

Link following in Apple iOS and iPadOS

Priority LOW 24

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00214 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-59
TI-2025-28085 CVE-2025-43380 · GHSA-jch4-f274-53mv

Out-of-bounds write in Apple macOS

Priority LOW 26

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00199 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-787
TI-2025-28030 CVE-2025-43322 · GHSA-jcj8-jr6w-r93j

Improper access control in Apple macOS

Priority LOW 24

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00212 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-284
TI-2025-28041 CVE-2025-43334 · GHSA-pm32-p37j-3jf8

Improper access control in Apple macOS

Priority LOW 24

This issue was addressed with additional entitlement checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00212 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-284
TI-2025-28124 CVE-2025-43420 · GHSA-grg8-q2p5-vr2m

Race condition in Apple macOS

Priority LOW 21

A race condition was addressed with improved state handling.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00141 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-362
TI-2025-28199 CVE-2025-43498 · GHSA-pqwf-2452-r2f3

Improper access control in Apple iOS and iPadOS

Priority LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00196 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-284
TI-2025-28179 CVE-2025-43477 · GHSA-946v-48wq-8882

Improper access control in Apple macOS

Priority LOW 24

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00198 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-284
TI-2025-28200 CVE-2025-43499 · GHSA-rmrv-87q6-gwjf

Improper access control in Apple iOS and iPadOS

Priority LOW 24

This issue was addressed with additional entitlement checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00188 Published 2025-11-04 Fixed in 18.7.2, 14.8.2 +2 CWE-284
TI-2025-28178 CVE-2025-43476 · GHSA-c7h7-j3m6-933p

Improper access control in Apple macOS

Priority LOW 35

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00204 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-284
TI-2025-28042 CVE-2025-43335 · GHSA-8hgp-69xr-m2w6

Improper access control in Apple macOS

Priority LOW 24

The issue was addressed by adding additional logic.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00212 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-284
TI-2025-28102 CVE-2025-43397 · GHSA-663r-g5g6-hgx7

Incorrect authorization in Apple macOS

Priority LOW 24

A permissions issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00184 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-863
TI-2025-28106 CVE-2025-43401 · GHSA-24x5-c472-vx8w

Improper input validation in Apple macOS

Priority MEDIUM 41

A denial-of-service issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01025 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-20
TI-2025-28181 CVE-2025-43479 · GHSA-grmc-3h6c-p3q9

Information disclosure in Apple macOS

Priority LOW 24

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00209 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-200
TI-2025-28087 CVE-2025-43382 · GHSA-jhmj-6p8j-qhqc

Path traversal in Apple macOS

Priority LOW 24

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00219 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-22
TI-2025-28119 CVE-2025-43414 · GHSA-mjxr-6g34-88q5

Improper access control in Apple macOS

Priority LOW 27

A permissions issue was addressed with improved validation.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00224 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-284
TI-2025-28099 CVE-2025-43394 · GHSA-rg5r-258x-6c87

Link following in Apple macOS

Priority LOW 24

This issue was addressed with improved handling of symlinks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00247 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-59
TI-2025-28043 CVE-2025-43336 · GHSA-xm97-jwxx-3wfh

Incorrect authorization in Apple macOS

Priority LOW 20

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00203 Published 2025-11-04 Fixed in 14.8.2, 15.7.2 +1 CWE-863
TI-2025-28103 CVE-2025-43398 · GHSA-47gw-6w5v-m496

Memory corruption in Apple iOS and iPadOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.002 Published 2025-11-04 Fixed in 18.7.2, 26.1 +2 CWE-119
Load more